This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json) Hash identifier: rxFpwqBoL96tiZzPiltloNzh9LZnP7OgMtWbDKytuzI= Subject key identifier: 09:EB:1F:9F:DF:E6:B7:FA:22:51:FA:AE:9F:26:79:50:92:DE:9F:F0 Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28 Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28 Certificate serial: 019B41DB0B7165A4A1E8D35B4500C6A59CBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft Manifest number: 0C05 Signing time: Sun 21 Dec 2025 17:00:32 +0000 Manifest this update: Sun 21 Dec 2025 17:00:32 +0000 Manifest next update: Mon 22 Dec 2025 17:00:32 +0000 Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: LGyxxA7CLZNEzljRkMJ4KjiS7oHmlHLRrHyQyuHTlQg=) 2: KtAzNYXVImWMGMH8A6HLsIQbFYc.roa (hash: ltDvt7Ps4IWIzfc/uVIIbjH4kHjztdeIqznwfwNq8iY=) 3: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (hash: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:0b:71:65:a4:a1:e8:d3:5b:45:00:c6:a5:9c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28 Validity Not Before: Dec 21 17:00:32 2025 GMT Not After : Dec 22 17:00:32 2025 GMT Subject: CN=09eb1f9fdfe6b7fa2251faae9f26795092de9ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:47:09:03:4c:be:33:ee:06:cd:f5:53:47:95: dd:45:dc:b0:ec:e7:b2:e3:cb:07:0f:7d:24:58:e3: 4f:2e:47:ba:cb:02:4e:fb:de:1f:e0:de:a2:14:7a: 08:33:12:61:49:68:93:52:2a:ee:74:94:90:5a:c0: 13:2f:81:11:57:bc:0c:b8:3a:68:cd:59:30:d5:01: 53:2b:15:81:ab:20:a6:8a:17:2c:54:95:af:e7:a2: b5:47:24:10:2d:01:cf:3f:a8:17:d1:da:1e:ef:b3: dc:3c:24:cb:f8:29:2b:58:85:c1:e6:6b:c2:a9:dd: 05:3f:cd:79:da:2a:96:08:c0:c9:8d:b0:7d:59:de: 81:e8:56:8e:6e:24:69:c1:5d:01:df:be:ae:83:52: 95:75:06:79:3e:9b:6e:4f:f7:1f:30:63:b0:df:16: eb:5a:e1:b4:97:ab:37:e9:94:9f:8d:11:5d:b0:dc: 3a:17:40:85:ed:90:7d:73:37:42:07:86:51:61:db: 88:4f:27:f7:0f:a7:bd:17:38:33:83:7c:7a:42:59: bf:25:2c:bb:a6:c7:ce:dc:91:1d:93:34:b3:d2:94: 6b:67:ed:b4:50:14:bc:cf:d3:15:da:6d:37:75:f6: 71:a6:e4:2d:7f:07:e9:1a:b9:c0:28:ac:69:7f:4f: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EB:1F:9F:DF:E6:B7:FA:22:51:FA:AE:9F:26:79:50:92:DE:9F:F0 X509v3 Authority Key Identifier: keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ff:95:1c:12:fb:97:87:fe:90:dc:c3:9c:ab:49:f5:79:d9: 46:0d:3f:d7:7d:e5:e7:5a:5d:3d:79:d3:37:dc:df:b9:f3:ee: ee:77:89:c3:60:db:57:be:42:39:5f:a5:60:53:1f:18:6c:b6: e9:1a:09:4b:06:58:0b:5e:3f:62:46:9d:8b:01:b6:6d:18:19: 07:fb:54:d0:13:04:b0:64:37:aa:bf:ca:d3:57:a0:ed:5e:44: 2e:5c:78:85:20:9d:47:21:7e:b1:ab:86:a2:e1:30:d9:b6:4d: 5b:be:8f:c3:54:ae:f2:78:90:34:1f:dd:ac:5f:31:05:67:cd: 76:de:26:f8:18:d4:40:9f:d6:4e:96:a8:70:58:62:c2:71:05: 08:fc:99:33:85:5c:9b:6d:19:5d:98:83:78:de:c6:f3:05:8f: c8:e7:df:9f:9c:07:1e:57:47:c7:53:2b:c7:12:ee:f4:3b:09: 6d:9c:44:60:56:6d:f5:1c:fd:2a:d2:69:c1:f2:89:25:6a:f9: 34:3a:b4:02:b6:a9:53:c2:da:e1:15:bc:c4:9d:40:ec:19:8e: df:cb:f2:7e:61:11:c0:da:18:c3:a3:c4:04:e4:2f:1a:bb:8a: fc:ad:77:f7:a5:5c:85:be:28:b9:06:62:82:cc:ef:b1:86:84: 29:06:ad:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2wtxZaSh6NNbRQDGpZy7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjhlYzk2YzhlZTI2NWMzZGE0MjMyMzBhNTUyMTkzNjZk ZDliMjgwHhcNMjUxMjIxMTcwMDMyWhcNMjUxMjIyMTcwMDMyWjAzMTEwLwYDVQQD EygwOWViMWY5ZmRmZTZiN2ZhMjI1MWZhYWU5ZjI2Nzk1MDkyZGU5ZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEcJA0y+M+4GzfVTR5XdRdyw7Oey 48sHD30kWONPLke6ywJO+94f4N6iFHoIMxJhSWiTUirudJSQWsATL4ERV7wMuDpo zVkw1QFTKxWBqyCmihcsVJWv56K1RyQQLQHPP6gX0doe77PcPCTL+CkrWIXB5mvC qd0FP8152iqWCMDJjbB9Wd6B6FaObiRpwV0B376ug1KVdQZ5PptuT/cfMGOw3xbr WuG0l6s36ZSfjRFdsNw6F0CF7ZB9czdCB4ZRYduITyf3D6e9Fzgzg3x6Qlm/JSy7 psfO3JEdkzSz0pRrZ+20UBS8z9MV2m03dfZxpuQtfwfpGrnAKKxpf0993QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnrH5/f5rf6IlH6rp8meVCS3p/wMB8GA1UdIwQY MBaAFPT47JbI7iZcPaQjIwpVIZNm3ZsoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWIt OGQ0OTg4MjdmNDVjLzEvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWItOGQ0OTg4MjdmNDVj LzEvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZP+VHBL7 l4f+kNzDnKtJ9XnZRg0/133l51pdPXnTN9zfufPu7neJw2DbV75COV+lYFMfGGy2 6RoJSwZYC14/YkadiwG2bRgZB/tU0BMEsGQ3qr/K01eg7V5ELlx4hSCdRyF+sauG ouEw2bZNW76Pw1Su8niQNB/drF8xBWfNdt4m+BjUQJ/WTpaocFhiwnEFCPyZM4Vc m20ZXZiDeN7G8wWPyOffn5wHHldHx1MrxxLu9DsJbZxEYFZt9Rz9KtJpwfKJJWr5 NDq0ArapU8La4RW8xJ1A7BmO38vyfmERwNoYw6PEBOQvGruK/K1396Vchb4ouQZi gszvsYaEKQatQw== -----END CERTIFICATE-----Generated at Sun Dec 21 18:56:57 2025 by rpki-client